OpenStack Compute 2013.2.2

CPE Details

OpenStack Compute 2013.2.2
openstack
compute
2013.2.2
2014-03-26
12h35 +00:00
2014-03-26
17h59 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:openstack:compute:2013.2.2:*:*:*:*:*:*:*

Informations

Vendor

openstack

Product

compute

Version

2013.2.2

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2015-2687 2017-08-09 16h00 +00:00 OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes that they would normally not have permissions for.
4.7
Medium
CVE-2014-0134 2014-05-08 12h00 +00:00 The instance rescue mode in OpenStack Compute (Nova) 2013.2 before 2013.2.3 and Icehouse before 2014.1, when using libvirt to spawn images and use_cow_images is set to false, allows remote authenticated users to read certain compute host files by overwriting an instance disk with a crafted image.
3.5
CVE-2014-0167 2014-04-15 12h00 +00:00 The Nova EC2 API security group implementation in OpenStack Compute (Nova) 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 does not enforce RBAC policies for (1) add_rules, (2) remove_rules, (3) destroy, and other unspecified methods in compute/api.py when using non-default policies, which allows remote authenticated users to gain privileges via these API requests.
6
CVE-2014-2573 2014-03-25 14h00 +00:00 The VMWare driver in OpenStack Compute (Nova) 2013.2 through 2013.2.2 does not properly put VMs into RESCUE status, which allows remote authenticated users to bypass the quota limit and cause a denial of service (resource consumption) by requesting the VM be put into rescue and then deleting the image.
2.3
CVE-2013-4185 2013-10-29 22h00 +00:00 Algorithmic complexity vulnerability in OpenStack Compute (Nova) before 2013.1.3 and Havana before havana-3 does not properly handle network source security group policy updates, which allows remote authenticated users to cause a denial of service (nova-network consumption) via a large number of server-creation operations, which triggers a large number of update requests.
4